The latter advisory is especially noteworthy to Mac admins, as that means that Apple’s XProtect was updated to block older versions of Java. That said, XProtect was not updated after the latest round of updates in June 2013, so those versions were not previously set in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist as the minimum allowed versions. See below the jump for more details.

With the August 29th update, the following versions of the Java browser plug-in are now set as the minimum allowed versions:

For 10.6.x:

com.apple.java.JavaAppletPlugin – 13.9.7

com.apple.java.JavaPlugin2_NPAPI – 13.9.7

Click on the image below for comparisons of /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist from before and after the August 29 XProtect update.

For 10.7.x – 10.8.x

com.apple.java.JavaAppletPlugin – 14.8.0

com.apple.java.JavaPlugin2_NPAPI – 14.8.0

com.oracle.java.JavaAppletPlugin – 1.7.25.15

Click on the image below for comparisons of /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist from before and after the August 29 XProtect update.

Like this:

Related

It’s strange because in our macs in classrooms in 10.8, using your xprotect_re-enable_java_6_and_7.sh, we have java blocked (we use update 21). When we examine the XProtect.meta.plist, it’s version 2039 but in the field for MinimumPlugInBundeVersion, there is 1.7.21 and not 1.7.25. Or java 7 update 21 is installed, so i don’t understand why it’s blocked. An idea ?

And second question, does your script will function now, after the upgrade to 25, or no more ?

It sounds like the script is working fine, as it’s updated XProtect to set Update 21 as the minimum allowed version. Safari 5.x and 6.x have their own Java blocking mechanisms built in, so you may need to add some additional scripts for Safari. I have some posts on those as well:

Thanks for the answer and sorry for the delay. We used also in our macs your additional scripts for Safari. But i think that the problem is different, because the java applets are blocked also in Firefox, not only in Safari. And in the XProtect.meta.plist, it’s version 2039 but in the field for MinimumPlugInBundeVersion, there is 1.7.21. So everything should be fine, your script seems to work, because we have Java 7 update 21 installed. But java applets are blocked.

Not sure what to tell you then. One thing that’s important to know is that Firefox doesn’t refer to XProtect for browser plug-in information. Instead, Mozilla has built a separate blocking mechanism into Firefox to govern whether plug-ins can run or not. For more information on this, please see the links below: